Removing about:blank

[Guest]

My sister's computer has had trouble with about:blank for quite a while now.
I recieved some tips from this site, and tried various programs (CWSShredder,
Adaware, and Spybot S&D).

CWSShredder did not find anything, Aboutbuster found a few things. Spybot
found over 100 "CWW" type files, but it said many of them could not be
removed because the files were in use, or in memory. It asked if I wanted to
run again on restart, and I selected yes. However, I came up with the same
result.

How do I remove these files? Do I have to find them individually and delete
them manually? Is this safe? A lot of them were simply ".txt" files, but
some were ".dat" files, and a few were in the "registry key"

Any suggestions? I want to see if this works before posting a HJT log.

Thanks, Rich

 

[Galen]

In richzip <[email protected]> had this to say:

My reply is at the bottom of your sent message:

My sister's computer has had trouble with about:blank for quite a
while now. I recieved some tips from this site, and tried various
programs (CWSShredder, Adaware, and Spybot S&D).

CWSShredder did not find anything, Aboutbuster found a few things.
Spybot found over 100 "CWW" type files, but it said many of them
could not be removed because the files were in use, or in memory. It
asked if I wanted to run again on restart, and I selected yes.
However, I came up with the same result.

How do I remove these files? Do I have to find them individually and
delete them manually? Is this safe? A lot of them were simply
".txt" files, but some were ".dat" files, and a few were in the
"registry key"

Any suggestions? I want to see if this works before posting a HJT
log.

Thanks, Rich

The easiest way is to do more than one scan with more than one cleaner in
safe mode with the latest definitions.

Malware Cleaning :
http://kgiii.info/windows/all/general/malwarefix.html

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes

 

[Guest]

I did run multiple cleaners (AdAware, AboutBuster, Microsoft, CWSShredder,
Spybot). I also ran them at least twice each. I ran Spybot a total of 6
times--each time it found over 100 CoolWeb things--but it was unable to
remove them. It gave me a message saying the files were in use or in memory.
And the programs were all run in safe mode.

 

[PA Bear]

When all else fails (and it will with an about:blank infection), HijackThis
v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30
for expert analysis, not here.**

 

[Jim Byrd]

Hi Rich - Start here. Please post back with your results or if you need
additional assistance.

Courtesy of Ron Kinner MVP:


"There is a German program called Spoonweg.exe which might
help.

http://lunatic-skydance.de/mr/soft/SpoonWeg.exe

It will start to download. Save it somewhere you can find
it again then Open it and say YES then Click on Trojaner-
Suchen. If it finds the version of about:blank that it is
meant to kill it will go and do it then reboot the PC.
Otherwise it will say Trojaner Spooner wird nicht gefunden.

Another German program is SpHjFix.exe.

http://www.trojaner-info.de/cgi-bin/download.cgi?file=sphjfix

This one speaks English so just Press on Start Disinfection
If it doesn't find its target it will say Not Infected
across the top of the little window. Otherwise follow the
instructions.

Both of these probably run better in Safe Mode (F8 -
without Networking)

Finally if both of the above fail then try one of the
methods in:

http://www.pchell.com/support/aboutblank.shtml "



I can also recommend the procedures at www.pchell.com .